uottawa.ca Architecture Review Board (ARB)

Transcription

1 Architecture Review Board (ARB)

2 Presentation Outline ARB Goals ARB Big Picture ARB Membership ARB 3 Steps Gate 1: Initiation Gate 2: Solution Review Gate 3: Architecture Review

3 ARB - Goals Support Client Objectives Identifying opportunities for reuse early Identifying risks early Opening new communication channels among stakeholders Support EA Objectives Alignment of IT project to EA principles, strategies and roadmaps Support IT Objectives Cooperation: work with each other, with our clients, and our partners Efficiency: to streamline the technology architecture review process Quality: to ensure the technology architecture reflects our joint commitment to quality

4 ARB Big Picture

5 ARB - Membership

6 ARB 3 Steps Gate 1: Initiation Initiation Presentation (Client and IT Manager) The ARB will recommend specific solutions and technology directions that the project team will include in their options analysis Gate 2: Solution Review Solution Review Presentation (IT Manager) The ARB will make a recommendation based on a fit/gap assessment of the proposed solution against EA principles and target-state roadmaps Gate 3: Architecture Review Architect Review Presentation (IT Manager) The ARB will make a recommendation based on security risk assessment, alignment with technology standards, and operational feasibility.

7 Architecture Review Board Gate Details INITIATION

8 ARB Initiation Input: 1-Pager Presentation Item Project Details Project Context Current Situation Problems Statement Business Case Approach Key Clients Outcomes Strategic Alignment Description Project Name, Sponsor, Budget Timelines / Constraints / Special Considerations Current state process, data/information, and business application. Problem or opportunity prompting this project activity - in customer terms Desired state process, data/information, and business application Sole-Source, RFI / RFP Internal Impacted internal or external clients Expected outcomes or metrics Student Experience, Research Excellence, International, Bilingualism

9 ARB Initiation Outcome: Solution Direction ARB Outcomes ARB Delegate Solution Review Period Solution Direction Description Identify an IT lead for the project Period at which the project is expected to present at Gate 2 (Solution Review) Alternatively, explicitly stating that this requirement is waived. Specific solution and technology direction that the project team will include in their options analysis.

10 Architecture Review Board Gate Details SOLUTION REVIEW

11 ARB Solution Review Input: High-Level Design Presentation Solution Key Client Impacts Key Data Impacts Proposed Technology Solution Options Analysis Use Case Realization Viewpoints Exceptions to Existing Standards *Include opportunities / risks from Architecture Guidance Description Internal and external clients and stakeholders Data elements and classification What is the proposed technology solution, including existing or evolved application and services. How does the proposed architecture compare to other options? How are architecturally significant use cases realized by the solution? Describe the architecturally significant viewpoints such as business process, security, information/data, and technology. Any known exceptions to existing standards

12 ARB Solution Review Outcome: Solution Review Solution Review Aspect Architectural Review Period EA Fit/Gap Details EA Architecture Review Criteria (as applicable) FIPPA Compliance SOC 2 Type 2 Recommendation Period at which the project is expected to present at Gate 3 (Architectural Review) Alternatively, explicitly stating that this requirement is waived. Alignment to EA Principals Expected alignment to the target-state with respect to: Security, SOA, Mobile, Business Intelligence (BI), and Operational Simplicity Applicable TOGAF Checklists Applicable Security Checklists PCI DSS Compliance The ARB will make a recommendation based on a fit/gap assessment of the proposed solution against EA principles and target-state roadmaps.

13 Architecture Review Board Gate Details ARCHITECTURE REVIEW

14 ARB Architecture Review: Input: Architecture Presentation Architecture Design Users Systems and Data (SIS, ERP, CRM, Faculty / Service System) Security User Interface Platforms Application Integration Operationalization Specific Elements Internal / External User / Administrative Roles Confidentiality, Volume Integration Patterns (ETL) / Analytics (BI) Transmission / Storage Encryption Authentication / Federation Authorization / Access Control Network Zoning Web, Mobile Portal Document Management / Collaboration Datacenter / Virtualization Cloud (IaaS, PaaS, SaaS) Integration patterns (i.e. ESB/SOA) Services *Include opportunities / risks from Architecture Guidance Supported Technology Availability and Monitoring Resilience and High Availability(RPO,RTO) Backup / Restore and Disaster Recovery

15 ARB Architecture Review Outcome: Architecture Review Evaluation Criteria Security Risk Assessment EA Architecture Review Criteria Standards and Building Blocks EA Application Inventory Recommendation Evaluation Details What is the assessment of the proposed architecture from a security perspective. Architecture alignment to technology standards operational feasibility requirements Identity Provisioning, Authentication, Authorization Network, Transport encryption, and zoning Storage, Backup, Recovery Integration SOA/ESB, ETL Update to standards and building blocks as required Update assets inventory and health as required The ARB will make a recommendation based on security risk assessment, alignment with technology standards, and operational feasibility.

16 Architecture Review Board Gate Details ARCHITECTURE GUIDANCE

17 Architecture Guidance Input Agenda Users Systems and Data Options (SIS, ERP, CRM, Faculty / Service System) Security Options User Interface Options Platforms Options Application Integration Options Operationalization Options Discussion Points Internal / External User / Administrative Roles Confidentiality, Volume Integration Patterns (ETL) / Analytics (BI) Transmission / Storage Encryption Authentication / Federation Authorization / Access Control Network Zoning Web, Mobile Portal Document Management / Collaboration Datacenter / Virtualization Cloud (IaaS, PaaS, SaaS) Integration patterns (i.e. ESB/SOA) Supported Technology Availability and Monitoring Resilience and High Availability(RPO,RTO) Backup / Restore and Disaster Recovery

18 Architecture Guidance Outcome: Guidance Agenda Architecture Guidance Opportunities Risks Discussion Points Recommendations that may guide, influence, or change the proposed architecture Opportunities to be presented to the ARB Risks to be included in the presentation to the ARB